Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 16:34

General

  • Target

    aab2ed8ded5658198597df85086a723d_JaffaCakes118.pdf

  • Size

    367KB

  • MD5

    aab2ed8ded5658198597df85086a723d

  • SHA1

    91b9adffb6d5a540698184d9b95cf5f7475b4b20

  • SHA256

    ba7a47bda0b37affe1659f4878262cbea76fec9baf95c41aa378eda827544ed6

  • SHA512

    52c049c20a716a5464ac1662ef437db2682fb81a13806ae2c828a14ab0832897b32e252e35f30cffc838acae16abcacb6d857839ba0e1bfa5f087e88ebca1630

  • SSDEEP

    6144:snrZUW2eauVozh3foW2YSEE0KP5srKySCyCu7yGwJZw3jTs0MFZBnMXm:srZUW2fzhAW2sErPfh4GiKiF7MW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aab2ed8ded5658198597df85086a723d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2996

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b2f45df244ebc6ecf90f5d4037155f14

          SHA1

          8903a7a0079b2067942cab1e9e08b07f467fb42c

          SHA256

          f5f49fcdf6b9cfb9f822be2c39a08937699239d2bccdb07c23c991f381c4c100

          SHA512

          4033528025d26a92ad1e3ec903902de23d91f1043ba997f3e8eced0918fa74d97cdb64a70bee0caed07de634b8799e1a2d4ebc0fcc82fff22e115a5b1924eed2